github-auth
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard CLI tools like
git,gh, andcurlto detect environment capabilities and manage user authentication status. These are routine operations for developer-focused tools. - [DATA_EXFILTRATION]: Reads local configuration files (~/.git-credentials, .env) to retrieve authentication tokens. These tokens are used solely to communicate with GitHub's official API for identity verification, which is an expected behavior for an authentication skill.
- [SAFE]: No evidence of prompt injection, obfuscation, or unauthorized data transmission was found. The skill adheres to established security practices for credential management.
Audit Metadata